Remar ks/Ar gu men ts : 

These Remarks are in reply to the Office Action mailed July 22, 2003. An appropriate 
Petition for Extension of Time to Respond is submitted herewith, together with the appropriate 
fee. 

Claims 1-14 were pending in the Application prior to the outstanding Office Action. In 
the Office Action, the Examiner rejected claims 1-14. Reconsideration of the rejections is 
requested. 

Claims 1-14 are apparently rejected under 35 U.S.C. § 1 12 for having inadequate 
disclosure of storing cookies or information in a repository. The use of a cookie repository is 
described in the present invention's specification on page 3, lines 2-17. This page provides 
adequate disclosure for one skilled in the art to produce a cookie repository. The cookie 
repository can be something as simple as a memory searchable by session ID to find a cookie 
associated with that session ID. This can be done with a conventional database or another 
memory system. For this reason, these claims are believed to be adequately supported. 

Claims 1-14 are rejected under 35 U.S.C. § 103(a) as being unpatenable over Wagner, 
U.S. Patent 6,085,224 in view of McGee, U.S. Patent 6,393,468. The Applicant respectfully 
traverses this rejection. 

Wagner, in column, 2 and 3, describes prior art systems for dealing with cookies. Cookie 
data can be placed in the HTTP headers of incoming of HTML files. Browsers can then store the 
cookie data and provide the cookie data in an HTTP header of an outgoing HTML GET or PUT 
request to the web page server. This allows the web site to track the user. 

Wagner also describes known programs that strip away the cookies from the HTTP 
headers of an incoming file, so that it is not passed to a browser program. Note that the cookie is 
not stored with these programs. The known programs can also strip away previously stored 
cookies from the HTTP header of an outgoing HTML GET or PUT request. Again, the cookies 
are striped from the outgoing request and not stored. The device described in column 2, line 54 
to column 3, line 14 of Wagner, has no need to store a cookie. This device attempts to avoid the 

Attorney Docket No. : YAHOO-0 1 006US0 MCF/JPO 4 
JOmalley/Yahoo/01006usO/Response. V5.doc 



storing of the cookie at the browser and to prevent previously stored cookies from being sent to 
the outside web sites. 

McGee describes a system in which for security reasons, normal URLs are replaced by 
randomized token values at the server. The randomized token values provide security for the 
system because it is impossible for the client to determine the real URL from the token. The 
server stores associations between the real URL and the token value and then can provide web 
pages in which the URL has been converted into token values. This system has nothing to do 
with cookies. 

It would not be obvious from a combination of McGee and Wagner to produce the 
present claims. 

Claim 1 includes a step of stripping off cookies, storing the cookies in a repository, 
producing a modified page, and then sending the modified page to a client. Claim 2 includes 
removing cookies, storing information contained in the cookie in a repository and sending a 
response page to the client browser. 

The cookie repository of the claimed invention allows the cookie to be maintained at a 
server rather than at the client. The server can get web pages from web sites that require cookies 
but the cookies need not be kept on a client. 

Neither Wagner nor McGee alone or in combination disclose, suggests or give a 
motivation for such a system. In particular, neither Wagner nor McGee discloses or suggest 
storing a stripped off cookie or information from a cookie in a repository and then sending a 
modified page to a client. Normal browsers store cookies at the browser of a client. The browser 
does not formulate a modified page. In Wagner, the cookies are stripped away but they are not 
stored. McGee does not describe storing the cookie or information of a cookie in a repository. 

For the above reasons, claims 1 and 2 are believed to be allowable. Claims 3-13 are 
dependent upon claim 2 and for that reason are believed to be allowable. 

Claim 2 includes appending a unique session ID to each URL in a response page before 
sending the response page to a client browser. Claim 14 includes appending an identifier to each 
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link in the document and sending that document to the client, the identifier identifying 
information stored in the repository for the client. 

Neither Wagner nor McGee alone or in combination disclose such limitations. In 
particular, McGee describes a system in which the real URL is replaced by a random token. The 
server of McGee stores a correspondence between the real URL and the token. 

There is a significant difference to in replacing a URL with a token, rather than as 
claimed in the present invention appending a session ID. Appending a session ID would 
frustrate the purpose of the McGee reference. McGee reference is a data access control system. 
The purpose of replacing URL with a token in the McGee system is to prevent the client from 
knowing the real URL. If the token of the McGee would be appended to the URL, the client can 
determine the real URL. 

Appending the session ID to the URL has advantages for the present invention. 
Appending the session ID to the URL allows the server to recover from a server data failure. 
Even if the stored data for the serve is erased, the server can still strip away the session ID and 
request the information at the URL without cookies. When the URL replaced by a token upon a 
server data failure, the server is unable to determine the URL. Additionally, the client user can 
get an indication of the real URL and thus avoid clicking on it if the URL appears to be 
undesirable. 

For the above reasons claim 2 and claim 14 are believed to be allowable. Claims 3-13 are 
believed to be allowable because they are dependent upon claim 2. 

For the above discussed reasons claims 1-14 are believed to be allowable and such is 
respectfully request. 

In light of the above, it is respectfully submitted that all of the claims now pending in the 
subject patent application should be allowable, and a Notice of Allowance is requested. The 
Examiner is respectfully requested to telephone the undersigned if he can assist in any way in 
expediting issuance of a patent. 
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Enclosed is a PETITION FOR EXTENSION OF TIME UNDER 37 C.F.R. § 1.136 for 
extending the time to respond up to and including up to December 22, 2003. 

The Commissioner is authorized to charge any underpayment or credit any overpayment 
to Deposit Account No. 06-1325 for any matter in connection with this response, including any 
fee for extension of time, which may be required. 



Date: 





Joseph P. O'Malley 
Reg. No. 36,226 



FLIESLER DUBB MEYER & LOVEJOY LLP 
Four Embarcadero Center, Fourth Floor 
San Francisco, California 941 1 1-4156 
Telephone: (415) 362-3800 
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